Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2033323830.roa
File:                     3137322e38322e39302e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier:          HVCGaDiCp8umRimC48L5cwePK6OKtgxx4UIJgX3tfiE=
Subject key identifier:   15:85:55:98:C7:AB:CA:33:9A:93:D5:48:D6:05:6B:A4:9C:18:FD:7D
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       29F8B47EEB6C63EB7BA280BF3C0B9382D04A6BCA
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2033323830.roa
Signing time:             Tue 04 Jun 2024 07:47:37 +0000
ROA not before:           Tue 04 Jun 2024 07:42:37 +0000
ROA not after:            Tue 03 Jun 2025 07:47:37 +0000
asID:                     3280
IP address blocks:        172.82.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 15:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f8:b4:7e:eb:6c:63:eb:7b:a2:80:bf:3c:0b:93:82:d0:4a:6b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jun  4 07:42:37 2024 GMT
            Not After : Jun  3 07:47:37 2025 GMT
        Subject: CN=15855598C7ABCA339A93D548D6056BA49C18FD7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:c7:d3:3d:2d:13:56:b4:c5:8f:27:cc:d9:
                    20:56:d6:79:23:54:9f:3f:41:1c:fe:10:61:d8:4b:
                    42:c0:73:75:04:77:8e:84:ef:fd:bf:81:1d:44:d5:
                    99:59:84:6d:0a:70:27:a8:7b:2b:51:17:d5:7f:fd:
                    b3:94:78:d9:ad:52:09:21:65:60:4b:bf:81:47:29:
                    73:a7:80:31:b8:43:90:15:f3:42:5b:8c:f9:c3:a3:
                    db:36:43:2c:8c:0f:60:9b:04:dc:9d:06:3f:e1:a2:
                    cb:67:b4:59:1d:f9:df:bb:3f:12:e6:2e:2a:7a:65:
                    1e:c3:63:bd:a9:11:b9:2c:b2:dd:90:2d:89:b4:11:
                    86:98:14:3b:9a:84:b9:bd:ad:58:01:68:26:19:ee:
                    24:90:5f:10:e7:ea:94:bb:1a:cd:cb:b1:ad:9a:6c:
                    3f:47:51:3f:8f:4e:3f:34:52:8f:f1:48:1e:75:8b:
                    87:ed:60:60:14:c1:45:a0:df:0e:1e:d7:ea:00:8b:
                    f2:cd:39:ae:03:1e:ba:2a:b9:b1:fc:01:3e:d7:d8:
                    a6:6d:12:2c:7c:a8:80:3b:4f:dc:ab:f2:29:3f:af:
                    d1:68:b2:1f:0b:8a:8c:7f:75:81:45:ea:19:d1:f2:
                    a1:9e:2a:62:f1:47:a7:5c:b7:a7:f7:0a:f9:22:f4:
                    f0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:85:55:98:C7:AB:CA:33:9A:93:D5:48:D6:05:6B:A4:9C:18:FD:7D
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:ce:d8:32:5d:fb:99:be:24:b3:12:2f:f9:e5:b8:7c:f1:ea:
         16:44:88:c8:ef:d6:52:f6:02:4d:6a:e4:74:ad:bd:f9:a1:ae:
         16:3c:e0:af:0a:e0:b8:23:d9:5a:21:fc:45:40:65:04:d4:6b:
         8e:4c:67:c2:90:f4:79:1f:42:eb:5b:de:c3:00:57:3a:19:cb:
         a7:12:17:06:ab:3e:63:e1:f6:b0:56:bb:d0:16:17:db:b4:bc:
         82:ed:fc:3c:90:c6:2d:1d:3d:56:d0:e3:1a:35:33:23:31:88:
         1b:12:3c:b3:7f:aa:ba:28:33:03:b8:f7:81:dc:dc:24:16:9f:
         2e:b5:6c:99:4b:19:6d:63:a6:73:fb:5d:0d:75:2b:b2:ed:cc:
         4c:23:35:26:46:13:01:08:e6:55:c7:04:2e:9e:63:e9:a6:4f:
         6e:0d:5a:bb:14:01:bc:05:2d:b6:c0:f3:85:b9:c5:eb:94:fc:
         e1:cb:99:ed:6c:a3:5e:b7:70:e9:1b:86:11:17:7f:41:89:bf:
         34:c8:d8:27:5f:a2:cf:27:d5:b4:4b:88:31:36:d6:7e:8a:13:
         6b:5c:31:e6:95:21:53:9a:7d:10:95:7f:b3:20:77:7e:08:d5:
         69:d1:ea:eb:38:2c:1c:0f:4f:d8:07:4f:72:82:50:5e:d7:7b:
         b8:97:81:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 23:20:44 2024 by rpki-client on console-ams.rpki-client.org